Colmena | 335 Members | |
| A simple, stateless NixOS deployment tool - https://github.com/zhaofengli/colmena | 119 Servers |
| Sender | Message | Time |
|---|---|---|
| 23 Jun 2022 | ||
| How to reach it? And does it comply to any sort of colmena-nixos interface? | 14:25:43 | |
In reply to @schnecfk:ruhr-uni-bochum.deI've also successfully used Pulumi instead of Terraform for provisioning and Colmena takes over after that. I still dream of a world where I can do both with Nix. | 18:34:34 | |
In reply to @dantefromhell:matrix.orgBy bootstrap do you mean provisioning? Apparently some people think it doesn't not necessarily require state: https://www.bejarano.io/terraform-stateless/ | 18:38:13 | |
In reply to @dantefromhell:matrix.org* By bootstrap do you mean provisioning? Apparently some people think it does not necessarily require state: https://www.bejarano.io/terraform-stateless/ | 18:38:57 | |
| 23:43:51 | ||
| 24 Jun 2022 | ||
In reply to @schnecfk:ruhr-uni-bochum.dethx for clarification: Yes. In particular #68 but #42 includes some hints towards bootstrapping/ first OS install. | 02:10:10 | |
| I am not looking to automate provisioning of cloud resources (aka their creation) with colmena but the first OS installation (bootstrapping) of cloud and physical servers. | 02:11:17 | |
| Redacted or Malformed Event | 02:33:58 | |
In reply to @dantefromhell:matrix.orgI had no idea people use Nix for this. I used to do PXE boot. But now most IaaS bundle those 2 things together. For example, you ask for (provision) an EC2 instance running an AMI image (bootstrap). Is your use case like a local bare metal setup? | 02:38:38 | |
| hm, when I set up wireguard tunnels through networkd and I store secrets in /run/keys, with colmena I have a wireguard-privatekey-key.service unit | 10:46:21 | |
| how do I tie that into networkd while making sure that networkd does in fact setup the WAN networking so I can provide those keys | 10:46:48 | |
| with morph I had an action to restart networkd post upload | 10:49:35 | |
| and let networkd fail on bootup | 10:49:45 | |
| with a networkd-restart.service that waits for wireguard-privatekeys-keys.service? 😄 | 11:04:39 | |
| hexa: set postStart on the key unit, to run networkctl reconfigure $if? | 11:04:52 | |
| Not sure a restart is even needed? | 11:04:59 | |
| oh yeah, that sounds neat | 11:05:11 | |
| Or yeah a separate service could be cleaner. | 11:05:18 | |
| I can't really be arsed to enumerate the repositories | 11:05:22 | |
| * I can't really be arsed to enumerate the interfaces | 11:05:30 | |
| Just reconfigure then :D | 11:05:44 | |
| well, now it feels obvious 😄 | 11:08:14 | |
| I think I was stuck in my head somewhere | 11:08:21 | |
| Happens :D | 11:09:32 | |
| 11:28:23 | |
| this is a fun one. | 11:28:34 | |
| because nowhere in the trace there is a reference to the module in question | 11:28:54 | |
| do people tend to write scripts around colmena for:
| 13:15:17 | |
with morph I could do morph deploy default.nix boot --reboot --upload-secrets | 13:15:32 | |
| and colmena seems to upload secrets uploadAt=post-activation on applies with goal=boot directly after uploading the closure | 13:16:39 | |